This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
File:                     pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json)
Hash identifier:          mUkysO27VmAagiBSXxG1foFEcrVxQtEzbmRCVuazC5g=
Subject key identifier:   F0:88:30:0B:77:FF:72:8D:FB:77:59:14:2D:AC:DA:EC:48:12:C0:5B
Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22
Certificate issuer:       /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422
Certificate serial:       06B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
Manifest number:          06B0
Signing time:             Wed 10 Dec 2025 16:23:05 +0000
Manifest this update:     Wed 10 Dec 2025 16:23:05 +0000
Manifest next update:     Wed 17 Dec 2025 16:23:05 +0000
Files and hashes:         1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: LxWsWhhGWaLGGPTQTiR4U7N7wBtJJCBu7yUdDifw0kA=)
                          2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 16:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422
        Validity
            Not Before: Dec 10 16:23:05 2025 GMT
            Not After : Dec 17 16:23:05 2025 GMT
        Subject: CN=69399e69-73ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:41:5b:58:c9:67:4f:fb:4d:e2:54:37:01:
                    28:2c:16:39:43:fc:e5:b4:9d:65:22:0d:0d:d7:3e:
                    2a:6f:11:f3:f0:58:94:98:6b:a5:f0:e4:58:3f:3b:
                    aa:53:7f:98:03:21:5e:f2:34:70:56:be:4f:32:8f:
                    41:36:21:1b:38:1f:18:3f:10:9c:03:3d:ed:8f:80:
                    0c:14:6b:f1:95:15:4d:f4:9b:db:7d:72:de:70:f4:
                    4f:db:74:d9:9f:10:dc:11:a7:ab:e6:b2:c6:1b:b4:
                    2c:56:d1:f3:75:9f:8a:09:22:08:60:f3:28:53:90:
                    ba:c1:a4:c6:8b:00:ca:9f:6c:46:3b:86:e1:35:cf:
                    9f:de:ae:6c:51:6e:56:cd:57:33:5e:83:f3:5f:12:
                    c1:ae:cb:e7:88:11:be:98:02:5c:0a:15:b1:93:99:
                    9b:a9:46:fe:84:d7:74:98:52:36:78:ee:60:27:6e:
                    c9:85:cf:4e:be:98:d6:e5:7c:81:b6:15:2f:9a:9e:
                    27:f5:2d:60:fa:71:85:3c:b4:37:21:92:f2:94:61:
                    94:4f:92:33:8c:8a:ce:96:ae:2f:97:55:18:7f:b9:
                    d3:28:ff:e1:ce:39:46:87:ea:f5:26:6b:9c:3d:47:
                    2c:68:ab:9f:2e:05:4d:8e:a3:9e:f6:32:27:23:27:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:30:0B:77:FF:72:8D:FB:77:59:14:2D:AC:DA:EC:48:12:C0:5B
            X509v3 Authority Key Identifier:
                keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:5d:d6:9e:e0:f6:a3:07:06:2d:81:2a:40:d0:db:21:01:
         c6:d3:48:4b:c8:2f:ca:53:7e:7a:ab:9e:a5:8c:10:fd:e2:fa:
         27:00:37:fa:45:b2:58:61:1f:fa:18:b4:84:80:de:b5:97:6b:
         02:54:8f:72:2f:bd:63:4c:79:12:95:9c:75:28:ba:6a:1a:2c:
         ec:27:a5:57:b6:44:13:c3:92:5f:c2:de:d4:49:1d:2e:5b:cb:
         78:56:26:56:32:a4:5a:e7:f9:b7:a8:04:b4:be:86:c8:6f:ca:
         9e:7b:b8:4e:70:ef:9c:56:f6:1a:1b:a6:e4:8b:7d:14:7e:b1:
         10:b9:f5:08:cf:5b:73:9b:4c:a5:22:f0:06:ff:ab:8b:90:9d:
         63:05:e1:a7:3e:d7:3c:b0:f7:c8:a0:fe:c0:99:0e:75:25:af:
         e2:2a:4a:65:85:b4:37:7d:b1:dd:cb:3e:8f:b5:c1:3c:d5:55:
         59:d5:5c:70:8f:38:c1:4a:85:b7:e2:32:3c:89:cf:b8:13:66:
         3c:72:e0:ad:cd:5c:ec:86:e6:12:57:19:80:d6:fc:a0:bc:dc:
         ae:51:a7:67:f9:ee:38:99:52:17:fe:65:2f:44:b4:02:a5:d3:
         5c:a0:33:92:ce:3a:96:e4:fe:6b:9d:fe:80:c9:d6:09:39:0a:
         ef:75:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:43:13 2025 by rpki-client